In my case I only need login and logout. The creation of an account will be done by other users with privileges established by the administrators. The modification of the profile will also be done partially by the user himself (change password, change email, add / change personal data etc) who has the account enabled and is already logged in. Obviously I can delete all links and specific functions from the frontend, as well as I can require to approve any registration made from the outside but it would be more secure to also do a server-side prevention by disabling actions that do not need.
Translated with www.DeepL.com/Translator (free version) Il giorno sabato 28 marzo 2020 20:30:48 UTC+1, Massimo Di Pierro ha scritto: > > not possible yet. I can implement it easily but I would like to understand > some use cases. > > On Saturday, 28 March 2020 10:12:32 UTC-7, Paolo Caruccio wrote: >> >> In py4web is there any way to disable some auth actions? I can't find >> anything in the code about this. >> >> In web2py this is possible via auth.settings.action_disabled >> >> For example: >> >> auth.settings.action_disabled=['register'] >> >> prevents the "register" action from working. >> >> Tank you. >> > -- Resources: - http://web2py.com - http://web2py.com/book (Documentation) - http://github.com/web2py/web2py (Source code) - https://code.google.com/p/web2py/issues/list (Report Issues) --- You received this message because you are subscribed to the Google Groups "web2py-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/web2py/c6945cf6-c014-4f55-9d12-a55244159f72%40googlegroups.com.
